
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File: rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier: KZZxKPcF4YNCVjtJPFIBGF1KRyZGku5wCE2LHI5d9EI=
Subject key identifier: 6E:F9:BB:3B:FD:09:45:9B:C2:30:EA:9F:54:9C:A6:65:27:7F:09:6B
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer: /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number: 9B
Signing time: Sun 15 Nov 2026 07:38:33 +0000
Manifest this update: Sun 15 Nov 2026 07:38:33 +0000
Manifest next update: Sun 22 Nov 2026 07:38:33 +0000
Files and hashes: 1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: DqsgXORXOOktRXsk1uNvK6QBvcv6A3nqqOTEfdunCiU=)
2: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
3: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
4: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 07:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Validity
Not Before: Nov 15 07:38:33 2026 GMT
Not After : Nov 22 07:38:33 2026 GMT
Subject: CN=6af96179-dfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:64:36:77:e2:0a:c0:27:fc:81:9d:bb:dc:
b7:e1:ac:fc:0c:9e:7f:41:24:fa:94:4c:78:89:32:
15:57:79:07:5a:ea:25:a6:80:ac:c4:3c:2d:51:9c:
6f:09:5e:d0:46:03:84:27:e5:1b:c1:b5:b6:1e:5f:
d5:f6:c4:50:16:5e:bc:6c:06:ad:45:9c:b7:1e:81:
3e:ee:d3:27:e8:3d:57:cc:fa:d7:be:9e:a6:9b:d7:
c9:1a:1e:d9:a0:5f:42:ed:5f:83:a0:c9:c7:b5:3f:
cf:c5:ef:b4:f0:73:5f:bc:1c:58:ae:9a:8d:36:7d:
91:1b:3b:e8:70:7f:99:ef:61:9e:3d:26:78:59:f8:
d5:41:06:6b:bd:d2:92:6e:08:c6:1e:96:b4:34:c3:
78:84:cc:38:7c:4f:17:50:46:9c:8d:73:85:3c:d4:
71:d5:24:f8:64:a1:f9:3a:7a:13:5b:f6:91:d6:2a:
f7:7b:f2:e4:79:52:ff:10:99:d7:00:0b:f0:1c:75:
d5:88:93:3f:0a:a7:29:b6:6e:21:3d:1d:6a:50:d4:
73:32:5e:f9:7c:30:29:e6:3c:45:6a:5c:e5:a9:4a:
97:94:25:62:60:5f:63:fa:d1:a4:6e:97:f2:91:97:
07:cb:3a:b5:08:36:5b:bb:58:3a:7c:55:8b:94:c6:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:BB:3B:FD:09:45:9B:C2:30:EA:9F:54:9C:A6:65:27:7F:09:6B
X509v3 Authority Key Identifier:
keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a5:ea:2b:91:93:3a:54:97:b4:97:a2:8d:fd:d4:3c:0e:1a:
67:48:07:58:2d:85:ac:d9:e6:b8:37:29:74:d5:f6:bb:6f:9c:
81:6a:22:0d:5b:30:78:22:40:12:40:39:88:28:3a:61:e8:12:
ce:b1:18:dd:8a:17:70:90:2c:9e:ac:0d:c1:59:4e:0a:0c:63:
37:94:9c:c3:fc:3a:d6:93:e2:1a:0a:cd:12:ab:2b:03:0f:36:
7c:e8:0e:20:5f:10:1e:88:c5:1e:13:4f:54:b9:c4:36:2f:5e:
38:4c:dd:e8:01:2a:6d:72:18:02:a0:3a:a3:3a:0f:57:13:7a:
47:36:12:75:a1:ec:91:7c:85:6f:5f:49:5e:69:b1:de:0a:96:
6d:a8:1a:7f:3f:db:86:dd:d1:02:ce:ae:21:cf:9a:92:12:ed:
90:c3:c0:8e:d3:86:fd:8c:6a:ad:71:24:7e:24:94:32:75:ac:
bb:e9:c0:66:6c:ab:dd:db:49:2d:9e:d0:09:a2:3a:83:c9:19:
f5:1f:76:4f:aa:e1:47:ae:92:d5:55:48:a5:ea:9c:3c:7f:e8:
51:91:70:b7:93:ed:49:9c:6a:3e:d1:8d:c6:13:74:e2:5b:3e:
91:de:30:f3:5f:54:9c:f9:a0:9e:20:ad:80:5f:dc:61:d1:92:
e6:bf:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:57:00 2026 by rpki-client